Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8h3lTpKeYnlKVovSzIkMSUbJ9fE.cer
File:                     8h3lTpKeYnlKVovSzIkMSUbJ9fE.cer (raw, json)
Hash identifier:          TfyI/Nps0dmcdENWBPn5BqaMFBLwozpCrlstXMN9Zb8=
Subject key identifier:   F2:1D:E5:4E:92:9E:62:79:4A:56:8B:D2:CC:89:0C:49:46:C9:F5:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018889085A999636FFF3DB7FF7752D567E09
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/aa3e6b-0cd4-4f78-bd98-c656d6617d90/1/8h3lTpKeYnlKVovSzIkMSUbJ9fE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/aa3e6b-0cd4-4f78-bd98-c656d6617d90/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 05 Jun 2023 00:50:06 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 198366

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:89:08:5a:99:96:36:ff:f3:db:7f:f7:75:2d:56:7e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  5 00:50:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f21de54e929e62794a568bd2cc890c4946c9f5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:fe:86:fd:f1:4e:ac:21:60:74:74:01:4d:
                    0d:b4:13:36:a4:d4:97:84:fe:2a:8b:0b:1b:54:07:
                    ea:84:87:62:46:94:7a:fe:c4:aa:a7:ca:dc:d5:31:
                    12:0a:6b:8d:7f:f1:3b:1c:66:ef:a8:f7:e3:41:73:
                    a7:2f:c2:a1:3e:4f:fe:ff:8c:63:dd:f2:3b:93:60:
                    f9:ce:e6:a4:d7:d7:95:b7:c4:7b:2a:6f:6d:bc:59:
                    00:7f:6f:b5:f8:93:5c:3f:2f:fb:da:2d:a7:4b:33:
                    ab:a9:57:f8:66:0b:dd:4d:58:80:4f:96:f0:b7:ad:
                    27:ca:44:2f:e5:ba:31:94:df:69:46:ad:02:b3:a9:
                    ac:2b:97:6f:14:8b:37:e9:b1:f8:0c:97:96:0d:dd:
                    26:e4:61:43:c1:d0:46:4a:00:77:19:91:91:89:1d:
                    f5:67:9b:f2:32:e3:49:f7:5f:b7:e9:a5:8a:d6:68:
                    1e:e5:98:4c:e0:7e:6f:e0:53:3a:03:5b:a6:61:33:
                    3d:90:01:0d:d4:cb:41:e1:d1:6e:ce:4a:bf:b8:08:
                    e9:55:19:b7:5d:06:e9:f1:e6:10:e1:b2:a8:ef:ca:
                    2e:85:ff:c2:28:02:7c:15:37:cd:84:9d:cf:c8:ba:
                    80:89:c2:a0:97:c8:8a:f9:74:f0:d5:e1:13:d8:25:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1D:E5:4E:92:9E:62:79:4A:56:8B:D2:CC:89:0C:49:46:C9:F5:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/aa3e6b-0cd4-4f78-bd98-c656d6617d90/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/aa3e6b-0cd4-4f78-bd98-c656d6617d90/1/8h3lTpKeYnlKVovSzIkMSUbJ9fE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198366

    Signature Algorithm: sha256WithRSAEncryption
         57:87:40:d9:fe:cc:48:ca:f9:5d:e9:58:b2:ab:05:e1:02:8a:
         4b:4f:f1:d5:2f:57:b8:0f:de:50:85:aa:36:0d:d4:98:f2:fb:
         cb:92:d0:40:79:4b:a8:f4:38:75:77:13:6b:5f:59:bf:72:04:
         1d:ac:bf:45:4e:d8:8d:f3:8c:e6:93:e5:a0:39:aa:78:fa:8b:
         8a:c6:3d:b5:53:c4:de:e2:5a:bb:99:a2:20:d7:ac:74:ec:78:
         90:a8:c0:49:ec:ac:aa:a3:0a:bd:c1:c9:b6:9d:0e:ae:6d:10:
         a4:c4:fe:de:62:76:97:b5:1d:e1:8d:89:08:e3:5a:ce:5d:bf:
         6f:09:ec:c4:01:c9:78:b3:be:d0:fb:6e:77:aa:78:e5:1c:4c:
         5f:7d:ab:a4:33:b6:62:97:76:c0:59:0f:10:ef:8c:97:49:2f:
         aa:bf:1d:5f:f6:5d:70:e7:1d:23:98:17:94:87:78:06:3d:99:
         c8:10:bc:08:da:4b:91:7c:51:ff:37:4b:11:7c:c2:72:a6:dc:
         f7:38:e3:50:94:a6:b3:44:37:a6:d8:c9:f5:ef:fb:78:87:3e:
         a9:7c:0d:e2:9d:29:68:d8:93:2f:1b:a7:ec:45:7e:17:e7:f7:
         37:90:a0:0e:35:e8:bd:dc:e8:6e:ad:68:e8:fe:93:65:85:77:
         9c:7a:33:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----